Every single remote site we have is managed via a VPN connection. The VPN endpoints are mostly the site's firewall but you could just as easily manage the route

Every single remote site we have is managed via a VPN connection. The VPN endpoints are mostly the site's firewall but you could just as easily manage the router from a TeamViewer (LOL) connection into a system behind it. > The only real issue would be using a default password, which none of the top results shown on Google seem to have (thankfully). So, little-to-no issue here. You might want to think twice about attempting to log in to a system you weren't authorized to use. That's illegal in most jurisdictions.